Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131382e302f32342d3234203d3e20323135373438.roa
File: 3134352e37392e3131382e302f32342d3234203d3e20323135373438.roa (raw, json)
Hash identifier: flenq8PeVlE9vm0U+rg2wnRpozbYWyAuLm/5alGuZiE=
Subject key identifier: 50:96:40:0C:E5:6E:36:CB:C4:96:56:42:3F:08:24:63:A2:A7:0D:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33A241628C1D3EBED3DB4EDDCF113E8C6D5BB82C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131382e302f32342d3234203d3e20323135373438.roa
Signing time: Tue 10 Mar 2026 07:17:13 +0000
ROA not before: Tue 10 Mar 2026 07:12:13 +0000
ROA not after: Tue 09 Mar 2027 07:17:13 +0000
asID: 215748
IP address blocks: 145.79.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a2:41:62:8c:1d:3e:be:d3:db:4e:dd:cf:11:3e:8c:6d:5b:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 10 07:12:13 2026 GMT
Not After : Mar 9 07:17:13 2027 GMT
Subject: CN=5096400CE56E36CBC49656423F082463A2A70DBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:37:bb:b5:21:57:da:23:07:7d:f9:16:49:
4e:f8:ca:2e:d4:43:46:5c:c4:a6:24:49:82:55:f3:
1d:06:d8:8b:e5:b7:c0:9c:b5:88:57:e0:29:e8:88:
c9:8f:5d:e1:06:fa:4e:9f:c2:35:b5:57:6f:61:7f:
9a:63:42:bb:fe:93:f4:50:4a:b1:0a:c6:91:3a:aa:
18:78:fb:ec:65:90:c0:46:e3:64:7c:a4:13:f6:e1:
0b:da:cc:2d:88:b4:aa:f7:11:10:c4:13:15:b4:a9:
90:5d:50:2f:8f:e7:b5:96:1d:3f:64:01:87:14:47:
c2:b6:b6:97:58:7b:20:01:62:1c:49:ca:b7:b9:84:
b2:e7:52:0e:52:a8:68:a9:3f:27:0c:6d:b9:ee:7f:
a0:68:f9:af:1d:59:03:07:61:81:8d:94:a1:be:3b:
22:d1:65:72:e6:e9:ec:50:bc:f4:26:c9:44:4e:bf:
10:dc:e9:ad:c2:c9:88:1a:fb:c6:7a:63:26:b2:e8:
c5:17:36:57:4d:47:59:dc:c0:34:a3:59:2c:3d:b0:
3c:e0:92:0f:b6:2c:d7:cf:3f:56:77:d9:cf:a6:5b:
53:35:27:31:84:0b:d3:e1:d1:ea:da:61:85:84:c1:
0a:19:fc:34:02:19:25:8b:4d:16:ec:ee:21:25:a9:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:40:0C:E5:6E:36:CB:C4:96:56:42:3F:08:24:63:A2:A7:0D:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3131382e302f32342d3234203d3e20323135373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.118.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d9:6c:2b:95:4b:e2:82:82:61:53:83:2d:12:e3:ed:12:30:
09:b1:d4:a3:89:2d:16:ba:f9:a7:23:40:d6:e3:62:19:ce:76:
58:d4:f9:73:a4:b3:dd:b0:cb:c1:8e:a9:36:95:69:a9:6a:5b:
37:91:9b:47:52:b9:ec:8f:35:67:17:6b:b9:29:f9:6b:14:30:
73:3d:eb:79:14:e6:b4:b8:96:63:09:cd:c3:c9:f7:0c:1a:26:
55:f7:ce:3c:27:f2:ed:ce:55:a9:b4:d4:3e:f7:ea:22:ec:1e:
00:37:83:51:22:84:dc:3d:21:8a:f0:3f:f5:94:47:02:ec:c8:
4a:65:8a:0c:07:a2:ec:fd:d8:15:22:a5:c8:98:55:27:b6:8d:
9a:e0:1a:ab:74:33:ef:37:2e:6d:c3:99:c7:c7:d4:28:61:65:
b0:4f:4f:26:6a:28:ad:37:43:97:e1:e6:e8:99:ad:07:0e:57:
ac:dd:c9:32:6a:74:00:3b:65:53:a8:66:6b:14:90:93:d3:66:
0e:06:e4:db:c4:e2:07:dc:78:29:55:34:35:ff:2b:a2:9d:18:
48:9d:4a:a4:03:d1:74:ad:c2:7f:c5:1e:ed:81:82:41:e6:9b:
bf:56:9b:87:db:ef:1b:be:fb:dd:b7:7b:f0:36:c1:7a:42:da:
ff:96:71:11
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUM6JBYowdPr7T207dzxE+jG1buCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjAzMTAwNzEyMTNaFw0yNzAzMDkwNzE3MTNaMDMxMTAvBgNV
BAMTKDUwOTY0MDBDRTU2RTM2Q0JDNDk2NTY0MjNGMDgyNDYzQTJBNzBEQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrDe7tSFX2iMHffkWSU74yi7U
Q0ZcxKYkSYJV8x0G2Ivlt8CctYhX4CnoiMmPXeEG+k6fwjW1V29hf5pjQrv+k/RQ
SrEKxpE6qhh4++xlkMBG42R8pBP24QvazC2ItKr3ERDEExW0qZBdUC+P57WWHT9k
AYcUR8K2tpdYeyABYhxJyre5hLLnUg5SqGipPycMbbnuf6Bo+a8dWQMHYYGNlKG+
OyLRZXLm6exQvPQmyUROvxDc6a3CyYga+8Z6Yyay6MUXNldNR1ncwDSjWSw9sDzg
kg+2LNfPP1Z32c+mW1M1JzGEC9Ph0eraYYWEwQoZ/DQCGSWLTRbs7iElqYUTAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUUJZADOVuNsvEllZCPwgkY6KnDb4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM0Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACRT3YwDQYJKoZIhvcNAQELBQADggEBAJLZbCuVS+KCgmFTgy0S4+0SMAmx1KOJ
LRa6+acjQNbjYhnOdljU+XOks92wy8GOqTaVaalqWzeRm0dSueyPNWcXa7kp+WsU
MHM963kU5rS4lmMJzcPJ9wwaJlX3zjwn8u3OVam01D736iLsHgA3g1EihNw9IYrw
P/WURwLsyEpligwHouz92BUipciYVSe2jZrgGqt0M+83Lm3DmcfH1ChhZbBPTyZq
KK03Q5fh5uiZrQcOV6zdyTJqdAA7ZVOoZmsUkJPTZg4G5NvE4gfceClVNDX/K6Kd
GEidSqQD0XStwn/FHu2BgkHmm79Wm4fb7xu++923e/A2wXpC2v+WcRE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:31 2026 by rpki-client